Traffic Trace Info
DumpFile: 201204081400.dump
FileSize: 2203.55MB
Id: 201204081400
StartTime: Sun Apr 8 14:00:00 2012
EndTime: Sun Apr 8 14:15:01 2012
TotalTime: 900.57 seconds
TotalCapSize: 1732.01MB CapLen: 96 bytes
# of packets: 30902024 (23320.11MB)
AvgRate: 217.23Mbps stddev:62.75M
IP flow (unique src/dst pair) Information
# of flows: 1718122 (avg. 17.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.1% 1.9% 1.8% 1.4% 1.3% 1.3% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1338172
Top 10 bandwidth usage (bytes/total in %):
21.0% 13.6% 11.4% 8.3% 7.0% 5.2% 3.4% 2.9% 2.9% 2.2%
# of IPv6 addresses: 4422
Top 10 bandwidth usage (bytes/total in %):
32.5% 17.0% 14.0% 14.0% 11.5% 8.7% 8.7% 6.9% 6.9% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204081400.pktlen.png)
detailed numbers
[ 32- 63]: 6329418
[ 64- 127]: 6606069
[ 128- 255]: 1008358
[ 256- 511]: 842281
[ 512- 1023]: 764136
[ 1024- 2047]: 15351762
Protocol Breakdown
![[protocol breakdown chart]](201204081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30902024 (100.00%) 24452903991 (100.00%) 791.30
ip 30516229 ( 98.75%) 24236165834 ( 99.11%) 794.21
tcp 22891505 ( 74.08%) 20143136046 ( 82.38%) 879.94
http(s) 9253645 ( 29.95%) 12590115267 ( 51.49%) 1360.56
http(c) 5731830 ( 18.55%) 867261255 ( 3.55%) 151.31
squid 23355 ( 0.08%) 12363223 ( 0.05%) 529.36
smtp 32044 ( 0.10%) 5848546 ( 0.02%) 182.52
ftp 8908 ( 0.03%) 832624 ( 0.00%) 93.47
pop3 1402 ( 0.00%) 278217 ( 0.00%) 198.44
imap 759 ( 0.00%) 194010 ( 0.00%) 255.61
telnet 162 ( 0.00%) 10086 ( 0.00%) 62.26
ssh 36772 ( 0.12%) 6399954 ( 0.03%) 174.04
dns 3020 ( 0.01%) 328646 ( 0.00%) 108.82
bgp 756 ( 0.00%) 237942 ( 0.00%) 314.74
napster 3825 ( 0.01%) 240974 ( 0.00%) 63.00
realaud 87 ( 0.00%) 5514 ( 0.00%) 63.38
rtsp 9076 ( 0.03%) 7612059 ( 0.03%) 838.70
icecast 462 ( 0.00%) 80944 ( 0.00%) 175.20
hotline 29 ( 0.00%) 2069 ( 0.00%) 71.34
other 7785372 ( 25.19%) 6651324656 ( 27.20%) 854.34
udp 4155450 ( 13.45%) 2147775631 ( 8.78%) 516.86
dns 372087 ( 1.20%) 85805122 ( 0.35%) 230.60
rip 5 ( 0.00%) 368 ( 0.00%) 73.60
realaud 6 ( 0.00%) 501 ( 0.00%) 83.50
halflif 79 ( 0.00%) 13181 ( 0.00%) 166.85
starcra 11 ( 0.00%) 1246 ( 0.00%) 113.27
everque 291 ( 0.00%) 84347 ( 0.00%) 289.85
unreal 50 ( 0.00%) 42606 ( 0.00%) 852.12
quake 16 ( 0.00%) 1212 ( 0.00%) 75.75
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 3685305 ( 11.93%) 2055830357 ( 8.41%) 557.85
icmp 1587075 ( 5.14%) 125528099 ( 0.51%) 79.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1759 ( 0.01%) 604906 ( 0.00%) 343.89
ip6 1860509 ( 6.02%) 1815758679 ( 7.43%) 975.95
pim 173 ( 0.00%) 10380 ( 0.00%) 60.00
other 19573 ( 0.06%) 3332823 ( 0.01%) 170.28
frag 306643 ( 0.99%) 235445536 ( 0.96%) 767.82
ip6 385795 ( 1.25%) 216738157 ( 0.89%) 561.80
tcp6 184061 ( 0.60%) 88578512 ( 0.36%) 481.25
http(s) 12426 ( 0.04%) 13734767 ( 0.06%) 1105.32
http(c) 27783 ( 0.09%) 2212874 ( 0.01%) 79.65
smtp 145 ( 0.00%) 73226 ( 0.00%) 505.01
dns 320 ( 0.00%) 86214 ( 0.00%) 269.42
bgp 91 ( 0.00%) 15678 ( 0.00%) 172.29
other 143296 ( 0.46%) 72455753 ( 0.30%) 505.64
udp6 127649 ( 0.41%) 91953269 ( 0.38%) 720.36
dns 38695 ( 0.13%) 9519946 ( 0.04%) 246.03
halflif 2 ( 0.00%) 209 ( 0.00%) 104.50
starcra 127 ( 0.00%) 12684 ( 0.00%) 99.87
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 88823 ( 0.29%) 82420223 ( 0.34%) 927.92
icmp6 28360 ( 0.09%) 3812585 ( 0.02%) 134.44
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 45610 ( 0.15%) 32378163 ( 0.13%) 709.89
tcpdump file: 201204081400.dump.gz (699.98 MB)